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Abstract 

Various feature descriptions are being employed in logic program- 
ming languages and constrained-based grammar formalisms. The com- 
mon notational primitive of these descriptions are functional attributes 
called features. The descriptions considered in this paper are the possi- 
bly quantified first-order formulae obtained from a signature of binary 
and unary predicates called features and sorts, respectively. We estab- 
lish a first-order theory FT by means of three axiom schemes, show its 
completeness, and construct three elementarily equivalent models. 

One of the models consists of so-called feature graphs, a data struc- 
ture common in computational linguistics. The other two models con- 
sist of so-called feature trees, a record-like data structure generalizing 
the trees corresponding to first-order terms. 

Our completeness proof exhibits a terminating simplification sys- 
tem deciding validity and satisfiability of possibly quantified feature 
descriptions. 



Contents 



1 Introduction 3 

1.1 Feature Descriptions 4 

1.2 Feature Trees 5 

1.3 Organization of the Paper 6 

2 Preliminaries 7 

3 The Axioms 8 

4 Outline of the Completeness Proof 10 

5 Solved Formulae 12 

6 Feature Trees and Feature Graphs 15 

7 Prime Formulae 18 

8 Quantifier Elimination 24 



2 



1 Introduction 



Feature descriptions provide for the typically partial description of abstract 
objects by means of functional attributes called features. They originated 
in the late seventies with so-called unification grammars [15, 13], a by now 
popular family of declarative grammar formalisms for the description and 
processing of natural language. More recently, the use of feature descrip- 
tions in logic programming has been advocated and studied [3, 4, 5, 6, 21]. 
Essentially, feature descriptions provide a logical version of records, a data 
structure found in many programming languages. 

Feature descriptions have been proposed in various forms with various for- 
malizations [1, 2, 14, 18, 11, 20, 7, 12]. We will follow the logical approach 
pioneered by [20], which accommodates feature descriptions as standard 
first-order formulae interpreted in first-order structures. In this approach, a 
semantics for feature descriptions can be given by means of a feature theory 
(i.e., a set of closed feature descriptions having at least one model). There 
are two complementary ways of specifying a feature theory: either by ex- 
plicitly constructing a standard model and taking all sentences valid in it, or 
by stating axioms and proving their consistency. Both possibilities are ex- 
emplified in [20]: the feature graph algebra T is given as a standard model, 
and the class of feature algebras is obtained by means of an axiomatization. 

Both approaches to fixing a feature theory have their advantages. The con- 
struction of a standard model provides for a clear intuition and yields a 
complete feature theory (i.e., if (f> is a closed feature description, then either 
(f> or —i(f> is valid). The presentation of a recursively enumerable axiomati- 
zation has the advantage that we inherit from predicate logic a sound and 
complete deduction system for valid feature descriptions. 

The ideal case then is to specify a feature theory by both a standard model 
and a corresponding recursively enumerable axiomatization. The existence 
of such a double characterization, however, is by no means obvious since it 
implies that the feature theory is decidable. In fact, so far no decidable, 
consistent and complete feature theory has been known. 

In this paper we will establish a complete and decidable feature theory 
FT by means of three axiom schemes. We will also construct three models 
of FT, two consisting of so-called feature trees, and one consisting of so-called 
feature graphs. Since FT is complete, all three models are elementarily 
equivalent (i.e., satisfy exactly the same first-order formulae). While the 
feature graph model captures intuitions common in linguistically motivated 
investigations, the feature tree model provides the connection to the tree 
constraint systems [9, 10, 16, 17] employed in logic programming. 

Our proof of FTs completeness will exhibit a simplification algorithm that 
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computes for every feature description an equivalent solved form from which 
the solutions of the description can be read of easily. For a closed feature 
description the solved form is either T (which means that the description is 
valid) or _L (which means that the description is invalid). For a feature de- 
scription with free variables the solved form is _L if and only if the description 
is unsatisfiable. 



1.1 Feature Descriptions 



Feature descriptions are first-order formulae built over an alphabet of bina- 
ry predicate symbols, called features, and an alphabet of unary predicate 
symbols, called sorts. There are no function symbols. In admissible inter- 
pretations features must be functional relations, and distinct sorts must be 
disjoint sets. This is stated by the first and second axiom scheme of FT. 

(Axl ) \/x\/y\/z(f(x, y) A f(x, z) —^y = z) (for every feature /) 
(Ax2) \/x(A(x) A B(x) — > _L) (for every two distinct sorts A and B). 

A typical feature description written in matrix notation is 



x : 3y 



woman 
father 

husband 



engineer 
age : y 

painter 
age : y 



It may be read as saying that x is a woman whose father is an engineer, 
whose husband is a painter, and whose father and husband are both of the 
same age. Written in plain first-order syntax we obtain the less suggestive 
formula 

3y,F,H ( woman(X) A 

father (x, F) A engineer (F) A age(F,y) A 
husband(x, H) A painter (H) A age(H , y) ). 



The axiom schemes (Axl) and (Ax2) still admit trivial models where all 
features and sorts are empty. The third and final axiom scheme of FT 
states that certain "consistent" descriptions have solutions. Three Examples 
of instances of FTs third axiom scheme are 

3x, y, z (f(x, y) A A(y) A g(x, z) A B{z)) 
Vm, z 3x, y (f(x, y) A g(y, u) A h(y, z) A yff) 
Mz 3x, y {fix, y) A g(y, x) A h(y, z) A y/t), 
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where yf~\ abbreviates -<3z(f(y,z)). Note that the third description 

f(x,y)Ag(y,x)Ah(y,z)Afyt 
is "cyclic" with respect to the variables x and y. 

1.2 Feature Trees 

A feature tree (examples are shown in Figure 1) is a tree whose edges are 
labeled with features, and whose nodes are labeled with sorts. As one would 
expect, the labeling with features must be deterministic, that is, the direct 
subtrees of a feature tree must be uniquely identified by the features of the 
edges leading to them. Feature trees can be seen as a mathematical model 
of records in programming languages. Feature trees without subtrees model 
atomic values (e.g., numbers). Feature trees may be finite or infinite, where 
infinite feature trees provide for the convenient representation of cyclic data 
structures. The last example in Figure 1 gives a finite graph representation 
of an infinite feature tree, which may arise as the representation of the 
recursive type equation nat = + s(nat). 

A ground term, say f (g(a, b), h(c)), can be seen as a feature tree whose 
nodes are labeled with function symbols and whose arcs are labeled with 
numbers: 





f 






A 


2 


s 




h 








a 


b 





Thus the trees corresponding to first-order terms are in fact feature trees 
observing certain restrictions (e.g., the features departing from a node must 
be consecutive positive integers). 

Feature descriptions are interpreted over feature trees as one would expect: 

• Every sort symbol A is taken as a unary predicate, where a sort con- 
straint A(x) holds if and only if the root of the tree x is labeled with A. 

• Every feature symbol / is taken as a binary predicate, where a feature 
constraint f(x, y) holds if and only if the tree x has the direct subtree 
y at feature /. 



5 



point 



point 



xval 




yval 



xval I yval \ color 

/ \ \ 
2 3 red 




2 



3 



radius 




Figure 1: Examples of Feature Trees. 



The theory of the corresponding first-order structure (i.e., the set of all 
closed formulae valid in this structure) is called FT. We will show that FT 
is in fact exactly the theory specified by the three axiom schemes outlined 
above, provided the alphabets of sorts and features are both taken to be 
infinite. Hence FT is complete (since it is the theory of the feature tree 
structure) and decidable (since it is complete and specified by a recursive 
set of axioms). 

Another, elementarily equivalent, model of FT is the substructure of the 
feature tree structure obtained by admitting only rational feature trees (i.e., 
finitely branching trees having only finitely many subtrees). Yet another 
model of FT can be obtained from so-called feature graphs, which are finite, 
directed, possibly cyclic graphs labelled with sorts and features similar to 
feature trees. In contrast to feature trees, nodes of feature graphs may or 
may not be labelled with sorts. Feature graphs correspond to the so-called 
feature structures commonly found in linguistically motivated investigations 



1.3 Organization of the Paper 

Section 2 recalls the necessary notions and notations from Predicate Logic. 
Section 3 defines the theory FT by means of three axiom schemes. Section 4 
establishes the overall structure of the completeness proof by means of a 
lemma. Section 5 studies quantifier-free conjunctive formulae, gives a solved 
form, and introduces path constraints. Section 6 defines feature trees and 



[19, 8]. 
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graphs and establishes the respective models of FT. Section 7 studies the 
properties of so-called prime formulae, which are the basic building stones 
of the solved form for general feature constraints. Section 8 presents the 
quantifier elimination lemmas and completes the completeness proof. 

2 Preliminaries 

Throughout this paper we assume a signature SOR l+J FEA consisting of an 
infinite set SOR of unary predicate symbols called sorts and an infinite set 
FEA of binary predicate symbols called features. For the completeness of 
our axiomatization it is essential that there are both infinitely many sorts 
and infinitely many features. 1 The letters A, B, C will always denote sorts, 
and the letters /, g, h will always denote features. 

A path is a word (i.e., a finite, possibly empty sequence) over the set of all 
features. The symbol e denotes the empty path, which satisfies ep = p = pe 
for every path p. A path p is called a prefix of a path q, if there exists a 
path p' such that pp' = q. 

We also assume an infinite alphabet of variables and adopt the convention 
that x, y, z always denote variables, and X , Y always denote finite, possibly 
empty sets of variables. Under our signature SOR l+J FEA, every term is a 
variable, and an atomic formula is either a feature constraint xfy (f(x, y) 
in standard notation), a sort constraint Ax (A(x) in standard notation), 
an equation x = y, _L ("false"), or T ("true"). Compound formulae are 
obtained as usual with the connectives A, V, — >, -H-, -i and the quantifiers 

3 and V. We use 3<p \\/(f>] to denote the existential [universal] closure of a 
formula <p. Moreover, V{4>) is taken to denote the set of all variables that 
occur free in a formula <p. The letters <p and ip will always denote formulae. 

We assume that the conjunction of formulae is an associative and commu- 
tative operation that has T as neutral element. This means that we identify 
4>A (tpA0) with 0A(ipA(f>), and cpAT with <p (but not, for example, xfyAxfy 
with xfy). A conjunction of atomic formulae can thus be seen as the finite 
multiset of these formulae, where conjunction is multiset union, and T (the 
"empty conjunction") is the empty multiset. We will write ip C <p (or ip £ (f>, 
if ip is an atomic formula) if there exists a formula ip' such that ip A ip' = <p. 

Moreover, we identify 3x3y<p with 3y3x<p. If X = {x\, . . . , x n }, we write 
3X(f> for 3x\ . . .3x n (f>. If X = 0, then 3X<p stands for <p. 

1 The assumption that the alphabets of sorts and features are infinite is used in Propo- 
sition 7.9 and Lemma 8.4. 
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Structures and satisfaction of formulae are defined as usual. A valuation 
into a structure A is a total function from the set of all variables into the 
universe \A\ of A. A valuation a' into A is called an s-update [A-update] 
of a valuation a into A if a' and a agree everywhere but possibly on x [A]. 
We use (j)"^ to denote the set of all valuations a such that A,a\=<j>. We 
write <f) \= ij) ("<^> entails ip") if <j>^ C for all structures A, and <^> |=| ip 
("(f) is equivalent to -0") if <^ = tp^ for all structures .4. 

A theory is a set of closed formulae. A model of a theory is a structure 
that satisfies every formulae of the theory. A formula (f> is a consequence 
of a theory T (T |= (f>) if V<^> is valid in every model of T. A formula (f> 
entails a formula ip in a theory T (<^> VO if 4^ ^ f° r every model A 
of T. Two formulae <j), tjj are equivalent in a theory T (0 Hx ^) if ^ = $ A 
for every model of T. 

A theory T is complete if for every closed formula (f> either (f> or —«f> is a 
consequence of T. A theory is decidable if the set of its consequences is 
decidable. Since the consequences of a recursively enumerable theory are 
recursively enumerable (completeness of first-order deduction), a complete 
theory is decidable if and only if it is recursively enumerable. 

Two first-order structures A, B are elementarily equivalent if, for every 
first-order formula (f>, (f> is valid in A if and only if (f> is valid in B. Note that 
all models of a complete theory are elementarily equivalent. 

3 The Axioms 

The first axiom scheme says that features are functional: 
(Axl ) \/x\/y\/z(xfy A xfz —^y = z) (for every feature /). 

The second scheme says that sorts are mutually disjoint: 

(Ax2) \/x(Ax A Bx — > _L) (for every two distinct sorts A and B). 

The third and final axiom scheme will say that certain "consistent feature 
descriptions" are satisfiable. For its formulation we need the important 
notion of a solved clause. 

An exclusion constraint is an additional atomic formula of the form xft 
("/ undefined on x v ) taken to be equivalent to -<3y (xfy) (for some variable 
y / x). 

A solved clause is a possibly empty conjunction (f> of atomic formulae of 
the form xfy, Ax and xft such that the following conditions are satisfied: 
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Figure 2: A graph representation of a solved clause. 



1. no atomic formula occurs twice in (f> 

2. if Ax £ cj) and Bx G (f>, then A = B 

3. if a;/?/ G <^ and G (f>, then y = z 

4. if s/y G <^>, then x/t ^ 

Figure 2 gives a graph representation of the solved clause 

xfu A A xk\ A 
Cm A uhx A wgy A w/z A 
Av A uya: A vhw A u/t A 
_Bw A w/t A wyt • 

A more readable textual representation of this solved clause is 

x : [f:u g:v k\] 
u : [C h:x g:y f:z] 
v : [A g:z h:w /t] 
W : [B ft gt]. 

As in the example, a solved clause can always be seen as the graph whose 
nodes are the variables appearing in the clause and whose arcs are given by 
the feature constraints xfy. The constraints Ax, xft appear as labels of 
the node x. The graphical representation of solved clauses should be very 
helpful in understanding the proofs to come. 

A variable x is constrained in a solved clause (f> if (f> contains a constraint 
of the form Ax, xfy or xft- We use CV{4>) to denote the set of all variables 
that are constrained in (f>. The variables in V{4>) — CV{4>) are called the 
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parameters of a solved clause (f>. In the graph representation of a solved 
clause the parameters appear as leaves that are not not labeled with a sort 
or a feature exclusion. The parameters of the solved clause in Figure 2 are 
y and z. 

We can now state the third axiom scheme. It says that the constrained 
variables of a solved clause have solutions for all values of the parameters: 

(Ax3) \/3Xcj) (for every solved clause (f> and X = CV ((/))). 

The theory FT is the set of all sentences that can be obtained as instances 
of the axiom schemes (Axl), (Ax2) and (Ax3). The theory FTo is the 
set of all sentences that can be obtained as instances of the first two axiom 
schemes. 

As the main result of this paper we will show that FT is a complete and 
decidable theory. 

By using an adaption of the proof of Theorem 8.3 in [20] one can show that 
FTo is undecidable. 

4 Outline of the Completeness Proof 

The completeness of FT will be shown by exhibiting a simplification algo- 
rithm for FT. The following lemma gives the overall structure of the algo- 
rithm, which is the same as in Maher's [17] completeness proof for the theory 
of constructor trees. 

Lemma 4.1 Suppose there exists a set of so-called prime formulae such 
that: 

1. every sort constraint Ax, every feature constraint xfy, and every equa- 
tion x = y such that x / y is a prime formula 

2. T is a prime formula, and there is no other closed prime formula 

3. for every two prime formulae fi and fi' one can compute a formula S 
that is either prime or _L and satisfies 

{3A{3'^ FT 5 and V(S) C V(fi A fi') 

4- for every prime formula fi and every variable x one can compute a 
prime formula fi' such that 

3x(i \=\ FT fi 1 and V{fi') C V(lx(i) 
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5. if f3 , /3i, . . . , f3 n are prime formulae, then 

n n 

3x((3A /\ -.#) Nft A 3x (P A 

6. for every two prime formulae (3, fi' and every variable x one can com- 
pute a Boolean combination 8 of prime formulae such that 

3x(fi A -./?') Hft 6 and V(5) C V(3a;(/3 A -./?')) • 

Then one can compute for every formula <p> a Boolean combination 8 of prime 
formulae such that <p> \=\ FT 8 and V(8) C V{4>). 

Proof. Suppose a set of prime formulae as required exists. Let <p> be a 
formula. We show by induction on the structure of <p> how to compute a 
Boolean combination 8 of prime formulae such that <p> Hft ^ and ^(^) — 

v{4>). 

If is an atomic formula Ax, xfy or x = y, then ^> is either a prime formula, 
or (f> is a trivial equation a; = a;, in which case it is equivalent to the prime 
formula T. 

If (f> is —iip, ip A tp' or -0 V -0', then the claim follows immediately with the 
induction hypothesis. 

It remains to show the claim for <p> = 3xip. By the induction hypothesis we 
know that we can compute a Boolean combination S of prime formulae such 
that 5 \=\ FT ip and V(S) C V(ip). Now S can be transformed to a disjunctive 
normal form where prime formulae play the role of atomic formulae; that is, 
S is equivalent to a\ V . . . V a n , where every "clause" is a conjunction of 
prime and negated prime formulae. Hence 

3xcp |=| 3x{a\ V ... V a n ) |=| zbdi V ... V 3a;(T n , 

where all three formulae have exactly the same free variables. It remains to 
show that one can compute for every clause a a Boolean combination 8 of 
prime formulae such that 3xa \=\ pT 8 and V{8) C V(3xa). We distinguish 
the following cases. 

(i) a = (3 for some basic formula (3. Then the claim follows by assump- 
tion (4). 

(ii) a = (3 A AE=i ""'A' j n > 0. Then the claim follows with assumptions (5) 
and (6). 

(Hi) a = AiLi "'A'j n > 0. Then <7 Hft ^ AE=i "'A' an( i the claim follows 

with case (ii) since T is a prime formula by assumption (2). 

(iv) a = fi x A . . . A f3 k A ^fi[ A . . . A fi' n , k > 1, n > 0. Then we know by 
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assumption (3) that either (3\ A ... A (3k Nft or @ l ^ • • • ^ @ k Nft P f° r 
some prime formula (3. In the former case we choose S = -iT, and in the 



Note that, provided a set of prime formulae with the required properties 
exists, the preceding lemma yields the completeness of FT since every closed 
formula can be simplified to T or -iT (since T is the only closed prime 
formula). 

In the following we will establish a set of prime formula as required. 

5 Solved Formulae 

In this section we introduce a solved form for conjunctions of atomic formu- 
lae. 

A basic formula is either 1 or a possibly empty conjunction of atomic 
formulae of the form Ax, xfy, and x = y. Note that T is a basic formula 
since T is the empty conjunction. 

Every basic formula (f> / _L has a unique decomposition (f> = ^>jv A <j)Q into a 
possibly empty conjunction ^>jv of equations LL x = y" and a possibly empty 
conjunction c/)q of sort constraints LL Ax v and feature constraints ll xfy v . We 
call (f>w the normalizer and and c/)q the graph of (f>. 

We say that a basic formula (f> binds x to y if x = y G 4> an( i x occurs 
only once in (f>. Here it is important to note that we consider equations as 
directed, that is, assume that x = y is different from y = x if x / y. We say 
that (f> eliminates x if (f> binds x to some variable y. 

A solved formula is a basic formula j / _L such that the following condi- 
tions are satisfied: 

1. an equation x = y appears in j if and only if j eliminates x 

2. the graph of 7 is a solved clause. 

Note that a solved clause not containing exclusion constraints is a solved 
formula, and that a solved formula not containing equations is a solved 
clause. The letter 7 will always denote a solved formula. 

We will see that every basic formula is equivalent in FTo to either 1 or a 
solved formula. 



latter case the claim follows with case 




□ 
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xfy A xfz A 4> 



xfz A y = z A 4> 



2 



Aa; A Bx A ^ 



A/ 5 



3 



Ax A Ax A (j) 



Ax A 4> 



4 



x = y A (f> 



x G V(<^>) and x ^ y 



x = y A (f>[x 




5 



a; = x A <j) 



Figure 3: The basic simplification rules. 



Figure 3 shows the so-called basic simplification rules. With (f>[x <— y] we 
denote the formula that is obtained from (f> by replacing every occurrence 
of x with y. We say that a formula (f> simplifies to a formula ip by a 
simplification rule p if ^ is an instance of p. We say that a basic formula <^> 
simplifies to a basic formula t/> if either <p = -0 or <p simplifies to ip in finitely 
many steps each licensed by one of basic simplification rules in Figure 3. 

Note that the basic simplification rules (1) and (2) correspond to the first 
and second axiom scheme, respectively. Thus they are equivalence transfor- 
mation with respect to FTo. The remaining three simplification rules are 
equivalence transformations in general. 

Proposition 5.1 The basic simplification rules are terminating and per- 
form equivalence transformations with respect to FTo. Moreover, a basic 
formula (f> / _L is solved if and only if no basic simplification rule applies to 
it. 

Proof. To see that the basic simplification rules are terminating, observe 
that no rule adds a new variable and that every rule preserves eliminated 
variables. Since rule (4) increases the number of eliminated variables, and 
the remaining rules obviously terminate, the entire system must terminate. 
The other claims are easy to verify. □ 

Proposition 5.2 Let (f> be a formula built from atomic formulae with con- 
junction. Then one can compute a formula S that is either solved or _L such 
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that (f> Hft 8 and ^ 

Proof. Follows from the preceding proposition and the fact that the basic 
simplification rules do not introduce new variables. □ 

In the quantifier elimination proofs to come it will be convenient to use so- 
called path constraints, which provide a flexible syntax for atomic formulae 
closed under conjunction and existential quantification. We start by defining 
the denotation of a path. 

The interpretations f A , g A of two features /, g in a structure A are binary 
relations on the universe \A\ of A; hence their composition f A o g A is again 
a binary relation on \A\ satisfying 

a(f A og A )b 3cG|-4|: af A c A cf A b 

for all a,b £ \A\. Consequently we define the denotation p A of a path 

p = f 1 ■ ■ ■ f n in a structure A as the composition 

(fi---fn) A := f A o-..of A , 

where the empty path e is taken to denote the identity relation. If A is a 
model of the theory FTo, then every paths denotes a unary partial function 
on the universe of A. Given an element a £ \A\, p A is thus either undefined 
on a or leads from a to exactly one b £ \A\. 

Let p, q be paths, x, y be variables, and A be a sort. Then path constraints 
are defined as follows: 



A, a \= xpy 
A,at\= xplyq 
A,a \= Axp 



a(x) p A a(y) 
3a £ \A\: a(x) p A a A a(y) q A a 
3a £ \A\: a(x)p A a A a £ A A . 



Note that path constraints xpy generalize feature constraints xfy. 

A proper path constraint is a path constraint of the form ll Axp v or 
"xplyq" . 

Every path constraint can be expressed with the already existing formulae, 
as can be seen from the following equivalences: 

xey x = y 

xfpy N 3z(xfzAzpy) [ z ^x,y) 

xp\yq \=\ 3z(xpzAyqz) (z^x,y) 

Axp \=\ 3y (xpy A Ay) (yz£x). 
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The closure [7] of a solved formula 7 is the closure of the atomic formulae 
occurring in 7 with respect to the following deduction rules: 

x = y xpy yfz xpz yqz Ay xpy 

xex xey xpfz xp\yq Axp 

Recall that we assume that equations x = y are directed, that is, are ordered 
pairs of variables. Hence, xey £ [7] and ytx ^ [7] if x = y £ 7. 

The closure of a solved clause 8 is defined analogously. 

Proposition 5.3 Let 7 be a solved formula. Then: 

1. if tt £ [7], then 7 \= it 

2. xey £ [7] iffx = yorx = y£y 

3. xfy £ [7] iff xfy £ 7 or 3z: x = z £ 7 and 2:/?/ £ 7 

4. xpfy £ [7] i/f 3z: xpz £ [7] and zfy £ 7 

5. if p z£ e and xpy, xpz £ [7], then y = z 

6. it is decidable whether a path constraint is in [7] . 

Proof. For the first claim one verifies the soundness of the deduction rules 
for path constraints. The verification of the other claims is straightforward. 
□ 

6 Feature Trees and Feature Graphs 

In this section we establish three models of FT consisting of either feature 
trees or feature graphs. Since we will show that FT is a complete theory, all 
three models are in fact elementarily equivalent. 

A tree domain is a nonempty set D C FEA* of paths that is prefix-closed, 

that is, if pq £ D, then p £ D. Note that every tree domain contains the 
empty path. 

A feature tree is a partial function <r:FEA* — > SOR whose domain is a 
tree domain. The paths in the domain of a feature tree represent the nodes 
of the tree; the empty path represents its root. We use D a to denote the 
domain of a feature tree a. A feature tree is called finite [infinite] if its 
domain is finite [infinite]. The letters a and r will always denote feature 
trees. 
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The subtree pa of a feature tree a at a path p £ D CT is the feature tree 
defined by (in relational notation) 

pa := {(q, A) \ (pq, A) e a}. 

A feature tree a is called a subtree of a feature tree r if a is a subtree of r 
at some path p £ D T , and a direct subtree if p = / for some feature /. 

A feature tree a is called rational if (1) a has only finitely many subtrees 
and (2) a is finitely branching (i.e., for every p £ D a , the set {pf £ D CT | 
/ £ FEA} is finite). Note that for every rational feature tree a there exist 
finitely many features fi, . . ., f n such that D a C . . . , /„}*. 

The feature tree structure T is the SOR 1+) FEA-structure defined as 
follows: 

• the universe of T is the set of all feature trees 

• a £ A^ iff a(e) = A (i.e., it's root is labeled with A) 

• (a, t) £ iff / £ D a and t = fa (i.e., r is the subtree of ct at /). 

The rational feature tree structure 1Z is the substructure of T consisting 
only of the rational feature trees. 

Theorem 6.1 The feature tree structures T and 1Z are models of the theo- 
ry FT. 

Proof. We will first show that T is a model of FT. 

The first and second axiom scheme are obviously satisfied by T. To see 
that T satisfies the third axiom scheme, let S be a solved clause, X be the 
variables constrained in S, and a be a valuation into T. It suffices to show 
that there exists an A-update a' of a such that T, a' \= S. 

Without loss of generality we can assume that S contains a sort constraint 
Ax for every a; £ A. Now one can verify that 

Mx £ A: 

(p, A) £ a'(x) Axp £ [5] V 

Bxp'y £ [S] 3(p", A) £ a(y): p = p'p" Ay ^ X 

defines an A-update a' of a such that T, a' \= S. 

The same construction shows that 1Z is a model of FT. □ 
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A feature pregraph is a pair (x,j) consisting of a variable x (called the 
root) and a solved clause 7 not containing exclusion constraints such that, 
for every variable y occurring in 7, there exists a path p satisfying xpy £ [7]. 
If one deletes the exclusion constraints in Figure 2, one obtains the graphical 
representation of a feature pregraph whose root is x. 

A feature pregraph (x,j) is called a subpregraph of a feature pregraph 
(y, S) if 7 C S and x = y or x £ V(#). Note that a feature pregraph has only 
finitely many subpregraphs. 

We say that two feature pregraphs are equivalent if they are equal 
up to consistent variable renaming. For instance, (x, xfy A ygx) and 
(u, ufx A xgu) are equivalent feature pregraphs. 

A feature graph is an element of the quotient of the set of all feature 
pregraphs with respect to equivalence as defined above. We use (x,j) to 
denote the feature graph obtained as the equivalence class of the feature 
pregraph (x,j). 

In contrast to feature trees, not every node of a feature graph must carry a 
sort. 

The feature graph structure Q is the SOR 1+) FEA-structure defined as 
follows: 

• the universe of Q is the set of all feature graphs 

• (x, 7) £ A g iff Ax £ 7 

• ((a;, 7), a) £ f g iff there exists a maximal feature subpregraph (y, 5) 
of (x, 7) such that xfy £ 7 and a = (y, S). 

Theorem 6.2 The feature graph structure Q is a model of the theory FT. 

Proof. The first and second axiom scheme are obviously satisfied by Q . To 
see that Q satisfies the third axiom scheme, let S be a solved clause and a 
a valuation into T. It suffices to show that there exists an CV(#)-update a' 
of a such that Q, a' \= S. 

First we choose for the parameters y £ V(S) — CV(S) variable disjoint feature 
pregraphs (y, j y ) such that a(y) = (y, j y ). Moreover, we can assume without 
loss of generality that every pregraph (y, j y ) has with S exactly its root 
variable y in common. Hence 

5' := 5/\ A ^ 

yeV(S)-CV(S) 
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is a solved clause. Now, for every constrained variable x £ CV(S), let p x be 
the maximal solved clause such that p x C 5' and (x, p x ) is a feature pregraph. 
Then the CV(#)-update a' of a such that a'(x) = (x, p x ) for every x £ CV(S) 
satisfies Q, a' \= 5. □ 



Let T be the structure whose domain consists of all feature pregraphs and 
that is otherwise defined analogous to Q . Note that Q is in fact the quotient 
of T with respect to equivalence of feature pregraphs. 

Proposition 6.3 The feature pregraph structure T is a model of FTo but 
not of FT. 

Proof. It is easy to see that T satisfies the first and second axiom scheme. 
To see that T does not satisfy the third axiom scheme, consider the solved 
clause 

5 = xfy A xgz 

and a valuation a into T such that a(y) = (x,Ax), a(z) = (x,Bx), and 
A / B. Then there exists no s-update a' of a satisfying J 7 , a' \= S since a 
feature pregraph cannot contain both Ax and Bx. □ 



7 Prime Formulae 

We now define a class of prime formulae having the properties required by 
Lemma 4.1. The prime formulae will turn out to be solved forms for formulae 
built from atomic formulae with conjunction and existential quantification. 

A prime formula is a formula 3X7 such that 

1. 7 is a solved formula 

2. X has no variable in common with the normalizer of 7 

3. every x £ X can be reached from a free variable, that is, there exists 
a path constraint ypx £ [7] such that y ^ X . 

The letter (3 will always denote a prime formula. 

Note that T is the only closed prime formula, and that 3X7 is a prime 
formula if 3x3Xj is a prime formula. Moreover, every solved formula is a 
prime formula, and every quantifier-free prime formula is a solved formula. 
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The definition of prime formulae certainly fulfills the requirements (1) and 
(2) of Lemma 4.1. The fulfillment of the requirements (3) and (4) will be 
shown in this section, and the fulfillment of the requirements (5) and (6) 
will be shown in the next section. 

Proposition 7.1 Let 3Xj be a prime formula, A be a model of FT, and 
A,a \= 3X7. Then there exists one and only one X -update a' of a such 
that A, a' \= J. 

Proof. The existence of an X-update a' of a such that A,a'\=j is obvious. 
The uniqueness of a' follows from the fact that features are functional, and 
that, for every x £ X , there exists a "global" variable x' ^ X and a path p 
such that A, a' \= x'px (since x'px £ [7]). □ 

The next proposition establishes that prime formulae are closed under exis- 
tential quantification (property (4) of Lemma 4.1). Its proof makes for the 
first time use of the third axiom scheme. 

Proposition 7.2 For every prime formula fi and every variable x one can 
compute a prime formula fi' such that 

3xfi \=\ FT fi 1 and V(fi') C V(3xfi). 

Proof. Let fi = 3X7 be a prime formula and a; be a variable. We con- 
struct a prime formula fi' such that 3xfi \=\ FT fi' and V(fi') C V(3xfi). We 
distinguish the following cases. 

1. x i V(/3). Then fi 1 := fi does the job. 

2. 7 = (x = y A 7'). Then fi 1 := 3X7' does the job. 

3. 7 = (y = x A 7'). Then fi 1 := 3X(j'[x <— y]) does the job since 7 
x = y A j'[x <— y]. 

4. x ^ X and x occurs in the graph but not in the normalizer of 7. Then 
we obtain fi' by a "garbage collection" deleting all parts of 3x(3 that cannot 
be reached from "global" variables. To do this we define the following: 

Y := X U {x} "quantified variables" 

Y\ := {x £ Y I 3ypx £ [7]: y ^ Y} "reachable variables" 
Y2 := Y — Y\ "unreachable variables" . 

Furthermore, let 

7 = j N A 7g 
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be the decomposition of 7 into normalizer and graph, and let 

1G = la A 7g 

be the decomposition of jq obtained by putting into j G all atomic formulae 
that contain a variable in Y 2 . To stay with the garbage collection metaphor, 
think of j' G as the reachable and of j G as the unreachable part of j G (under 
the quantification 3x3X). 

Since Y C V(j G ) ~ V(tjv), we have Y l C V(j' G ), V(j' G ) D Y 2 = 0, and 
Y 2 C V(7c). We will show that 

(3' := 3Yi (7jv A j' g ) 

does the job. 

It is straightforward to verify that (3' is a prime formula, and that V(/3') C 
V(3a;/3). 

Next we show 7g Nft Since 7^. is a solved clause and I2 contains 
all variables that are constrained in j'q, we know by the third axiom scheme 
that FT \= y3Y 2 Y f j. 

Finally we show 3x(3 Hft P' • To see this, recall V(jn) H Y = and 
V(7gr) fl I2 = 0) an( l consider: 

3a; /3 





3x3X(j N A 7g) 


N 


3y(7jv A 7g) 


N 


7jv A 3Y7g 


N 


Jn A 31i3l2 ( j'g A 7g) 


N 


7iv A 31i (7^. A 3127g) 




7jv A 3Y 1 j' G 


N 


3Y 1 ( 1N A 1 ' G ) = [3 1 . 



□ 



Proposition 7.3 7f /3 is a prime formula, then FT \= 3/3. 

Proof. Follows from the preceding proposition since T is the only closed 
prime formula. □ 



The next proposition establishes that prime formulae are closed under con- 
sistent conjunction (property (3) of Lemma 4.1). 



20 



Proposition 7.4 For every two prime formulae fi and fi' one can compute 
a formula 8 that is either prime or _L and satisfies 

fiAfi'^ FT 5 and V(5) C V(fi A fi'). 

Proof. Let fi = 3X7 and fi' = 3X'j' be prime formulae. Without loss of 
generality we can assume that X and X' are disjoint. Hence 

f3Af3' H 3X3X'(7A7'). 

Since 7 A j' is a basic formula, Proposition 5.2 tells us that we can compute 
a formula (f> that is either solved or _L and satisfies 7 A 7' Hft ^ an< ^ 
V(<^) C V(7 A 7'). If (f> = _L, then 5 := J_ does the job. Otherwise, (f> is 
solved. Since 

fi A fi 1 Hft 

we know by Proposition 7.2 how to compute a prime formula /3" such that 
fi Afi' Hft F rom the construction of fi" one verifies easily that V{fi") C 
V(/3A/3')- □ 

Proposition 7.5 _Le^ be a formula that is built from atomic formulae with 
conjunction and existential quantification. Then one can compute a formula 
8 that is either prime or _L such that (f> \=\ FT 5 and V(S) C V{4>). 

Proof. Follows with Propositions 7.2 and 7.4. □ 

The closure of a prime formula 3X7 is defined as follows: 

[3X7] := {tt G [7] I V(ir) n X = or tt = xex or tt = xe^xe}. 
The proper closure of a prime formula fi is defined as follows: 
[/?]* := {7r G [/3] I 7r is a proper path constraint}. 

Proposition 7.6 // /3 is a prime formula and tt G [/3], then fi \= tt (and 
hence — i7r \= —>f} ). 

Proof. Let fi = 3X7 be a prime formula, A,a \= f], and it G [/?]. Then 
there exists a X-update a' of a such that .4, a' \= 7. Since [/3] C [7], we 
have 7r G [7] and thus A, a' \= it. If it has no variable in common with X, 
then A, a \= it. Otherwise, it has the form LL xex v or LL xe J, xe v and hence 
yl, a \= tt holds trivially. □ 
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We now know that the closure [(3], taken as an infinite conjunction, is en- 
tailed by (3. We are going to show that, conversely, (3 is entailed by certain 
finite subsets of its closure [/?]. 

An access function for a prime formula (3 = 3X7 is a function that maps 
every x £ V(j) — X to the rooted path xe, and every x £ X to a rooted path 
x'p such that x'px £ [7] and x' ^ X . Note that every prime formula has at 
least one access function, and that the access function of a prime formula is 
injective on V(j) (follows from Proposition 5.3 (5)). 

The projection of a prime formula (3 = 3X7 with respect to an access 
function @ for (3 is the conjunction of the following proper path constraints: 

{xs^ys I x = y £ 7} U 

{Ax'p I Ax £ 7, x'p = @x} U 

{x'pf iy'q I £ 7, s'p = @s, y'q = @y}. 

Obviously, one can compute for every prime formula an access function and 
hence a projection. Furthermore, if A is a projection of a prime formula (3, 
then A taken as a set is a finite subset of the closure [(3]. 

Proposition 7.7 Let X be a projection of a prime formula (3. Then A C [f3]* 
and A \=\ FT (3. 

Proof. Let A be the projection of a prime formula (3 = 3X7 with respect 
to an access function @. 

Since every path constraint it £ A is in [(3] and thus satisfies (3 \= it, we have 

To show the other direction, suppose A, a \= A, where A is a model of 
FT. Then A, a' \= x'px for every x £ X with @x = x'p defines a unique X- 
update a' of a. From the definition of a projection it is clear that A, a' \= 7. 
Hence A, a \= (3. □ 

As a consequence of this proposition one can compute for every prime for- 
mula an equivalent quantifier-free conjunction of proper path constraints. 

We close this section with a few propositions stating interesting properties 
of closures of prime formulae. These propositions will not be used in the 
proofs to come. The reader is nevertheless advised to study the proof of 
Proposition 7.9 since it employs a construction that will be reused in a more 
complicated form in the proof of Lemma 8.4. 

Proposition 7.8 If (3 is a prime formula, then (3 \=\ FT [/?]*• 
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Proof. By Proposition 7.6 we have (3 \=ft [/?]*> an d by Proposition 7.7 we 
have [/?]* |=.ft since /3 has a projection A C [/?]*. □ 



Proposition 7.9 7f/3 is a prime formula, and it is a proper path constraint, 
then 

7T G ^ [i ^FT 7T. 

Proof. Let (3 = 3X7 be a prime formula, 7 = jn/\Jg be the decomposition 
of 7 into graph and normalizer, and it be a proper path constraint. Since 
the direction "=^" is stated by Proposition 7.6, it suffices to show the other 
direction. 

Suppose 7r ^ [/?]. We show that FT |= 3(/3 A _, 7r), which yields (3 \/=ft k 
since FT is consistent. 

Without loss of generality we can assume that V(tt) and X are disjoint. Let 
Y be the variables eliminated by 7. Since (/3 A —>tt) \=\ {(3 A -i7r[a; <— y]) if 
x = y £ 7jv, we can assume without loss of generality that it contains no 
variable in Y. 

Since 

3(/3a^tt) H 3 3y( 7JV A3X7 G A^tt) 
H 3(3Yj]\f A 3X7g A — i7r) 
N 3(3X 7g A-tt) 
N 3( 7G A-7r), 

it is sufficient to construct a solved clause 6 with jq C # and 5 _,7r 
(recall that FT |= 36 by the third axiom scheme). For the construction of 
6 we distinguish three cases: 

1. 7r = Axp, 7r = xp \. yq or it = yq J, sp, where xp \ xp (j£ [jo]- Then 
there exists a prefix p'/ of p and a variable z such that xp'z G [jg] an d 
£./V G 7g for no variable 2:'. Now adding zf~\ yields a solved clause 8 such 
that 5 \=ft _,7r - 

2. 7r = Asp, spa: g [7g]- If -B- 2 G 7Gj then A ^ B (since 7r (j£ [jg]) an d 
5 := jq does the job. Otherwise, we choose a sort B ^ A and add (recall 
that we have assumed infinitely many sorts). 

3. it = xp\yq, xpz G [7g] afl d y?- 2 ' G [jg]- Since 7r ^ [(3], we know that 
z ^ z' . We choose a new feature / and a new variable u and add z/'f and 
z'fu (recall that we have assumed infinitely many features). □ 
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Proposition 7.10 Let (3, (3' be prime formulae. Then 



Proof. "=}►" Let [3 \=ft f3' and tt G [f3'f . Then f3' ^ FT n by Proposition 7.6 
and hence /3 \=ft n by the assumption. Hence 7r G [/?]* by Proposition 7.9. 

"<*=" Let [/3]* D [(3'f. Then [/3]* |= [(3'f and hence /3 (3' by Proposi- 

tion 7.8. □ 

Proposition 7.11 Let (3, (3' be prime formulae, and let X' be a projection 
of (3'. Then (3 \= FT (3' [(3f D A'. 

Proof. "=}►" Suppose [3 \= FT f3' . Then [f3f D [f3'f by Proposition 7.10 and 
[f3f D X' by Proposition 7.7. 

"<*=" Suppose [/3]* D A'. Then [/3]* |= A' and hence f3 \= FT f3' by Proposi- 
tion 7.8 and 7.7. □ 

Proposition 7.11 gives us a decision procedure for 11 (3 \=ft /?"' since mem- 
bership in [/?]* is decidable, A' is finite, and A' can be computed from (3'. 

8 Quantifier Elimination 

In this section we show that our prime formulae satisfy the requirements (5) 
and (6) of Lemma 4.1 and thus obtain the completeness of FT. We start 
with the definition of the central notion of a joker. 

A rooted path xp consists of a variable x and a path p. A rooted path xp 
is called unfree in a prime formula (3 if 

3 prefix p' of p 3 yq: x / y and xp' ^yq G [(3]. 

A rooted path is called free in a prime formula (3 if it is not unfree in (3. 

Proposition 8.1 Let (3 = 3Xj be a prime formula. Then: 

1. if xp is free in (3, then x does not occur in the normalizer of j 

2. if x £ V((3), then xp is free in (3 for every path p. 

A proper path constraint it is called an a; -joker for a prime formula (3 if 
7r ^ [(3] and one of the following conditions is satisfied: 
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1. 7r = Axp and xp is free in (3 

2. 7r = xp\yq and aip is free in (3 

3. 7r = yp\xq and aig is free in (3. 

Proposition 8.2 It is decidable whether a rooted path is free in a prime 
formula, and whether a path constraint is an x -joker for a prime formula. 

Proof. Follows with Proposition 5.3. □ 

Lemma 8.3 Let (3 be a prime formula, x be a variable, it be a proper path 
constraint that is not an x-joker for (3, A be a model of FT, A, a \= (3, 
A, a' \= (3, and a' be an x-update of a. Then A, a \= it if and only if 
A, a' f= 7r. 

Proof. We distinguish the following cases: 

1. x (j£ V(tt). Then the claim is trivial. 

2. ir £ [f3]. Then (3 \=ft n an d hence a, a' £ ir^. 

3. it = Axp and xp unfree in (3. Then p = p'p" and xp' ^yq £ [(3] for some 
variable y / x and some path q. Hence (3 \=ft n ^ Ayqp", which yields 
the claim. 

4. it = xp\yq, x / y, xp unfree in (3. Analogous to case (3). 

5. it = xp\xq and both xp, xq unfree in (3. Analogous to case (3). □ 

Lemma 8.4 Let (3 be a prime formula and tt\, . . .,ir n be x-jokers for (3. 
Then 

n 

3x(3 \=ft 3x((3 A /\ -.7T,-). 

8 = 1 

Proof. Let (3 = 3Xj be a prime formula, tt\, . . . , ir n (n > 0) be a; -jokers for 
(3, A be a model of FT, and a be a valuation into A such that A, a \= 3x(3. 
We have to show that A, a \= 3x((3 A Ai=i _,7r «)- Without loss of generality 
we assume that x (j£ X , and that no m has a variable in common with X. 
Let 7 = 7jv /\Jg t> e the decomposition of j into normalizer and graph. Since 
there are a; -jokers for (3, we know that x (j£ V(jn)- 
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The proof now comes in two parts. Part II gives the construction of a solved 
clause 8 such that, if Y and Y\ are defined as 



Y := {i}UlU (V(8) - V(tg)) "quantified variables" 

Y\ := {y G Y \ \fy'py G [8] : ?/' G 1"} "unreachable variables" , 

the following conditions are satisfied: 

1. ye C (5 

2. additional variables in S are new variables, that is, (V(S) — V(jg)) H 
V ( 7JV ) = and (V(8) - V( 7G )) D V(tt 8 ) = for i = 1, . . . , n 

3. if a 1 is an Y-update of a such that A, a' \= 8, then A, a' \= —nr; for 
i = 1, . . . , n 

4. every atomic formula that occurs in S but not in jq contains only 
variables in Y\. 

In Part I of the proof we will show that from the existence of a solved 
clause 8 as specified above we can derive A, a \= 3x (/3 A A™=i _,7r «)- Part I 
uses a garbage collection technique similar to the one used in the proof of 
Proposition 7.2. The construction of 6 in Part II is a refinement of the 
construction in the proof of Proposition 7.9. We strongly recommend that 
the reader first gets a good intuitive understanding of the proofs of Propo- 
sition 7.2 and 7.9 before studying the rest of this proof. 

Part I. Suppose 6, Y and Y\ are given as specified above. We define Y2, Si 
and 82 such that 

• Y = Yi l+J Y 2 

• S = 81 A 8 2 

• v(s 2 )nY 1 = 

• every atomic formula in Si contains a variable in Yi. 

To stay with the garbage collection metaphor, think of Y2 as the reachable 
variables, of Si as the unreachable part of 8, and 82 as the reachable part 
of 8. By assumption (4) we know that 82 C jq. By the third axiom 
scheme we know that 3YiSi Hft "T> smce ^1 i s a solved clause and Yi 
contains all variables that are constrained in Si. 

Note that {x}, X and V{8) — V(jg) are pairwise disjoint. Hence 

3xf3 \= FT tjv A 3Y8 
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since 



3x [3 H 3x3X(j N A 7g) H In A 3x3Xj G H Tjv A 3Y 7G 

and 

3Y 7G |= 3Y5 2 Hft A BY^) Hft 3 ^(^2 A 6 J H FT 3Y5. 

Thus A, a \= jn A3Y5. Since V(jn) H7 = 0, there exists an Y-update of 
a' such that .4, a' ^= j^AS. By assumption (3) we know that A, a' \= —nr; 
for i = 1, . . ., n, and by assumption (1) we know that A, a' \= jq. Thus 
A, a' \= 3Y(yA/\™ =1 —>TTi). Since V(S) — V(jg) nas no variable in common 
with 7 A A™=i _ ' 7r « an d -X" nas no variable in common with A™=i _ ' 7r «' we 
have A, a' \=3x((3 A A"=i ^i)- 

Part II. We will now construct a solved form S as required. To do this we 
will look at every a; -joker m and possibly add constraints to jq such that 
requirement (3) in particular is satisfied. It suffices to distinguish the 
following cases (recall that x (j£ V(jn))'- 

1. iTi = Axp, xpz G [jg]- If Bz G 7Gj then A / B (since m (j£ [jg]) an d 
requirement (3) is met without adding anything. Otherwise, we choose 
a new sort B and add Bz (recall that we have assumed infinitely many 
sorts). 

2. iTi = Axp, xp\xp (j£ [jg]- Then there exists a prefix p'f of p and a 
variable z such that xp'z G [7g] an d z f z ' ^ JG for every z' . Adding 
z/y will yield a solved form and satisfy the requirements (f)-(3). It 
will also satisfy requirement (4) since xp is free in (3. 

3. iTi = xp^yq, xp free in (3, xp\xp (j£ [jg]- Analogous to case (2). 

4. iTi = xp^yq, xp free in (3, xpz G [jg]- We once more distinguish three 
cases: 

4.1 x / y. Let a' be a Y-update of a such that A, a' \= 7. Then q^ is 
defined on «'(?/) if and only if q^ is defined on a(y). If q^ is unde- 
fined on a(y), requirement (3) is satisfied without adding anything. 
Otherwise, let a(y)q^a. Then a'(y)q^a. Now choose a new feature / 
(recall that we have infinitely many features). If is defined on a, 
we add z/y; otherwise we add zfz' , were is a new variable. Require- 
ments (l)-(3) are obviously satisfied, and requirement (4) is satisfied 
since xp is free in (3. 

4.2 x = y and xq unfree in (3. Then we have q = q'q", xq' ^y'r G [(3] and 
y' (jiY for some g', g" y' and r. Let a' be a Y-update of a such that 
yl, a 1 \= 7. Then g^ = q'^q"^ is defined on a'(x) if and only if r^q"^ 
is defined on Oi(y'). If r^g"^ is undefined on a(y'), requirement (3) is 
satisfied without adding anything. Otherwise, let a(y')r^q"^a. Then 
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a'(x)q A -a. Now choose a new feature /. If is defined on a, add z/y; 
otherwise, add zfz', where z' is a new variable. Requirements (l)-(3) 
are obviously satisfied, and requirement (4) is satisfied since xp is free 
in (3. 

4.3 x = y and xq free in /3. If xq ^ xq (j£ [jg], we proceed analogous to 
case (2). Otherwise, let xqz' £ [jg]- Since m (j£ [(3], we know that 
z ^ z' . We choose a new feature / and a new variable u and add z/y 
and z'/tt. This will certainly satisfy the requirements (l)-(3). It will 
also satisfy requirement (4) since both xp and xq are free in (3. 

□ 

Note that the proof uses the third axiom scheme, the existence of infinitely 
many features, and the existence of infinitely many sorts. 

Lemma 8.5 Let (3, (3' be prime formulae and a be a valuation into a model 
A of FT such that 

A,a\= 3x(/3 A (!') and A,a\= 3x(/3 A -./?'). 

Then every projection of (3' contains an x -joker for (3. 

Proof. Without loss of generality we can assume that A, a \= (3 A (3' . 
Furthermore, there exists an s-update a 1 of a such that A, a' \= (3 A -i/3'. 
Let A be a projection of (3' . Since A, a' \/= (3' , we know by Proposition 7.7 
that A, a' \/= A. Hence there exists a proper path constraint it £ A such that 
A, a' \/= it. Since A, a \= (3' , we know by Proposition 7.6 that A,a \= it. 
Hence we know by Lemma 8.3 that it must be an a; -joker for (3. □ 

Lemma 8.6 If (3, (3\, . . . , (3 n are prime formulae, then 

n n 

3x((3A /\ -./?,-) H ft /\MP*^Pi)- 

8=1 8=1 

Proof. Let (3, (3\, . . . , (3 n be prime formulae. Then 3x((3 A A™=i "'A') N 
f\i = i 3x{(3 A —>(ii) is trivial. To see the other direction, suppose that A is 
a model of FT and A, a \= A™=i ^ x (P ^ We have to exhibit some 

s-update a' of a such that A,a' \= (3 and A, a' \= —ify for i = 1, . . . , ra. 

Without loss of generality we can assume that A, a' \= 3x {(3 A /3 8 ) for i = 
1, . . . , to and yl, a' \= -*3x((3 A /3 8 ) for i = to + 1, . . . , n. 
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By Lemma 8.5 there exists, for every i = 1, . . . , to, an a; -joker m £ [/3 8 ] for 
(3. By Lemma 8.4 we have 

m 

3x(3 \= 3x(f3 A /\ -.jr,-). 

8 = 1 

Since —nr \= by Proposition 7.6, we have 

3xP\=3x(l3A /\^/3i). 

8 = 1 

Hence we know that there exists an s-update a' of a such that A,a' \= (3 
and .4, a' |= -i/3 8 - for i = 1, . . . , to. Since we know that A, a \= -<3x((3 A /3 8 ) 
for i = to + 1, . . . , n, we have .4, a' ^= -i/3 8 - for i = to + 1, . . . , n. □ 

Lemma 8.7 For every two prime formulae (3, fi' and every variable x one 
can compute a Boolean combination 8 of prime formulae such that 

3x(fi A -./?') Hft 8 and V{5) CV{3x(fi /\^fi')). 

Proof. Let (3, fi' be prime formulae, A be a projection of (3' , i be a variable 
and A be a model of FT. We distinguish two cases: 

1. A contains an x-joker it for (3. Then we know that 3x(3 \= 3x((i A — i7r) 
by Lemma 8.4. Since f3' \=px X \= it, we know that —nr \= —>fi' and hence 
3xfi \= FT 3x{fi /\^fi'). Thus 

3x(fi A -./?') Hft 3a; /3. 
Now the claim follows with Proposition 7.2. 

2. A contains no x-joker it for (3. Then we know by Lemma 8.5 that there 
exists no valuation a into A such that 

A, a \= 3x(/3 A (!') and A, a \= 3x(/3 A -./?'). 

Hence 

3a;(/3 A -./?') Hft 3a; /3 a a Z 3 ')- 

Now the claim follows with Propositions 7.2, 7.4 and 8.2. 

The above shows the existence of 6. Moreover, S can be computed since 
we can compute a projection A of (3', and since we can decide whether A 
contains an a; -joker for (3 by Proposition 8.2 (A is finite). □ 

Theorem 8.8 For every formula (f> one can compute a Boolean combination 
S of prime formulae such that (f> \=\ FT 5 and V(S) C V(/3). 
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Proof. Follows from Lemma 4.1, Propositions 7.4 and 7.2, and Lemmas 8.6 
and 8.7. □ 



Corollary 8.9 FT is a complete and decidable theory. 

Proof. The completeness of FT follows from the preceding theorem and 
the fact that T is the only closed prime formula. The decidability follows 
from the completeness and the fact that FT is given by a recursive set of 
sentences. □ 
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